Proxy server Streaming

Module ngx_stream_proxy_module
5 Ways to Watch TV Abroad on Your Mac - ChrisWrites.com

Makes outgoing connections to a proxied server originate from the specified local IP address. Parameter value can contain variables (1.11.2). The special value off cancels the effect of the proxy_bind directive inherited from the previous configuration level, which allows the system to auto-assign the local IP address.

The transparent parameter (1.11.0) allows outgoing connections to a proxied server originate from a non-local IP address, for example, from a real IP address of a client:

proxy_bind $remote_addr transparent;

Syntax: proxy_buffer_size size;
Default:

proxy_buffer_size 16k;

Context: stream, server

This directive appeared in version 1.9.4.

Sets the size of the buffer used for reading data from the proxied server. Also sets the size of the buffer used for reading data from the client.

proxy_connect_timeout time;

proxy_connect_timeout 60s;

stream, server

Defines a timeout for establishing a connection with a proxied server.

proxy_download_rate rate;

proxy_download_rate 0;

stream, server

This directive appeared in version 1.9.3.

Limits the speed of reading the data from the proxied server. The rate is specified in bytes per second. The zero value disables rate limiting. The limit is set per a connection, so if nginx simultaneously opens two connections to the proxied server, the overall rate will be twice as much as the specified limit.

proxy_next_upstream on | off;

proxy_next_upstream on;

stream, server

When a connection to the proxied server cannot be established, determines whether a client connection will be passed to the next server.

Passing a connection to the next server can be limited by and by .

proxy_next_upstream_timeout time;

proxy_next_upstream_timeout 0;

stream, server

Limits the time allowed to pass a connection to the. The 0 value turns off this limitation.

proxy_next_upstream_tries number;

proxy_next_upstream_tries 0;

stream, server

Limits the number of possible tries for passing a connection to the. The 0 value turns off this limitation.

proxy_pass address;
server

Sets the address of a proxied server. The address can be specified as a domain name or IP address, and a port:

proxy_pass localhost:12345;

or as a UNIX-domain socket path:

proxy_pass unix:/tmp/stream.socket;

The address can also be specified using variables (1.11.3):

proxy_pass $upstream;

In this case, the server name is searched among the described server groups, and, if not found, is determined using a resolver.

proxy_protocol on | off;

proxy_protocol off;

stream, server

This directive appeared in version 1.9.2.

proxy_responses number;
stream, server

This directive appeared in version 1.9.13.

proxy_ssl on | off;

proxy_ssl off;

stream, server

Enables the SSL/TLS protocol for connections to a proxied server.

proxy_ssl_certificate file;
stream, server

Specifies a file with the certificate in the PEM format used for authentication to a proxied server.

proxy_ssl_certificate_key file;
stream, server

Specifies a file with the secret key in the PEM format used for authentication to a proxied server.

proxy_ssl_ciphers ciphers;

proxy_ssl_ciphers DEFAULT;

stream, server

Specifies the enabled ciphers for connections to a proxied server. The ciphers are specified in the format understood by the OpenSSL library.

The full list can be viewed using the “openssl ciphers” command.

proxy_ssl_crl file;
stream, server

Specifies a file with revoked certificates (CRL) in the PEM format used to the certificate of the proxied server.

proxy_ssl_name name;

proxy_ssl_name host from proxy_pass;

stream, server

Allows overriding the server name used to the certificate of the proxied server and to be when establishing a connection with the proxied server. The server name can also be specified using variables (1.11.3).

By default, the host part of the address is used.

proxy_ssl_password_file file;
stream, server

Specifies a file with passphrases for where each passphrase is specified on a separate line. Passphrases are tried in turn when loading the key.

proxy_ssl_server_name on | off;

proxy_ssl_server_name off;

stream, server
proxy_ssl_session_reuse on | off;

proxy_ssl_session_reuse on;

stream, server

Determines whether SSL sessions can be reused when working with the proxied server. If the errors “SSL3_GET_FINISHED:digest check failed” appear in the logs, try disabling session reuse.

proxy_ssl_protocols [SSLv2] [SSLv3] [TLSv1] [TLSv1.1] [TLSv1.2] [TLSv1.3];

proxy_ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

stream, server

Enables the specified protocols for connections to a proxied server.

proxy_ssl_trusted_certificate file;
stream, server

Specifies a file with trusted CA certificates in the PEM format used to the certificate of the proxied server.

proxy_ssl_verify on | off;

proxy_ssl_verify off;

stream, server

Enables or disables verification of the proxied server certificate.

proxy_ssl_verify_depth number;

proxy_ssl_verify_depth 1;

stream, server

Sets the verification depth in the proxied server certificates chain.

proxy_timeout timeout;

proxy_timeout 10m;

stream, server

Source: nginx.org


Related posts:

  1. Proxy server example
  2. Proxy server Sweden
  3. Proxy server for testing